Product · Apache

Apache Camel

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2019-0188

XML External Entity injection in Apache Camel

Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed.

Apache Apache Camel org.apache.camel:camel-core org.apache.camel:camel-xmljson Maven

May 28, 2019
High 7.5

CVE-2019-0194

Path Traversal in Apache Camel

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x (2.19 and earlier) versions may be also affected.

Apache Apache Camel org.apache.camel:camel-core Maven

Apr 30, 2019